tool-system[.]accounts-admin-agency[.]com

This domain, tool-system.accounts-admin-agency.com, is flagged as an active credential phishing site targeting users of Meta's Accounts Centre. Infrastructure analysis reveals the page title explicitly mimics 'Accounts Centre,' a known branding element used in legitimate Meta authentication portals. No specific drainer kit signatures have been confirmed, but the domain's structure and naming convention suggest an intent to deceive users into entering login credentials under false pretenses, likely for account takeover or financial fraud. Technical indicators confirm elevated risk: the domain was registered on May 01, 2026, through Gransy, s.r.o., and resolves to IP address 172.66.0.96, hosted by Cloudflare. VirusTotal detection shows 22 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is currently blocked by at least one enterprise-grade filtering system. The SSL certificate is issued by Google Trust Services (WE1), providing a false sense of legitimacy to unsuspecting users. As of the latest verification, the domain remains active and unresolved in major safe browsing databases, indicating continued operational status. Response actions by security providers have limited its reach, but residual risk persists due to the domain's recent registration and use of reputable hosting infrastructure. Users are advised to verify domain authenticity before entering credentials, enable multi-factor authentication on all accounts, and report suspicious login portals to their organization's security team or relevant platform abuse channels. Monitoring for follow-on phishing campaigns using similar naming conventions is recommended.